Which Egress IP addresses does Prisma Browser uses when all traffic is routed through Prisma Access?

Which Egress IP addresses does Prisma Browser uses when all traffic is routed through Prisma Access?

395
Created On 10/30/25 17:34 PM - Last Modified 02/06/26 03:35 AM


Question


Which Egress IP addresses does Prisma Browser uses when all traffic is routed through Prisma Access?



Environment


  • Prisma Access
  • Prisma Browser
  • Prisma Access Explicit Proxy
  • Prisma Access GlobalProtect
  • Prisma Access Remote Network


Answer


  1. When the Prisma Browser traffic is routed through Prisma Access, the traffic will be "Nated" in the Prisma Access Explicit Proxy nodes.
  2. So, the egress IPs for the public traffic will be the egress IP addresses for each deployed Explicit Proxy location and for private applications, it will be the loopback IP of the Explicit Proxy nodes.
  3. If Internal host detection and Agent detection is enabled in Prisma Browser routing, then the traffic will egress either from the office location IP or GlobalProtect IPs based on the routing of the host.


Additional Information


  • To retrieve the loopback and egress IP addresses, follow this document.
  • To configure the Prisma Browser routing, follow thisĀ document.


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA1Ki000000TOF3KAO&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail